Vladislav Vaintroub 5818146a1d MDEV-40656 Bypass REVOKE DENY ... FROM PUBLIC privilege check. ...

DENY ... TO PUBLIC denies everyone, including whoever tries to revoke
it, via the "deny wins" merge at every scope (global, db, table, column,
routine). Allow REVOKE DENY ... FROM PUBLIC when the revoker can UPDATE
mysql.global_priv (same as hand-editing).

Assisted-by: Claude:claude-5-sonnet

2026-08-27 16:10:40 +03:00

15 KiB

Raw Permalink Blame History

View Raw